> On Oct 25, 2017, at 6:06 AM, Rober Fernández <roberixion at gmail.com> wrote: > > hi, > when I try to capture the connection data, my origin data is not captured. In wireshark it works. What is the problem? some kind of bro configuration? Yes, https://www.bro.org/documentation/faq.html#why-isn-t-bro-producing-the-logs-i-expect-a-note-about-checksums — Justin Azoff